[Author Prev][Author Next][Thread Prev][Thread Next][Author Index][Thread Index]

[tor-bugs] #26813 [Applications/Tor Browser]: Modify about:buildconfig to include reproducible build information

#26813: Modify about:buildconfig to include reproducible build information
------------------------------------------+----------------------
     Reporter:  tom                       |      Owner:  tbb-team
         Type:  enhancement               |     Status:  new
     Priority:  Low                       |  Milestone:
    Component:  Applications/Tor Browser  |    Version:
     Severity:  Normal                    |   Keywords:
Actual Points:                            |  Parent ID:
       Points:                            |   Reviewer:
      Sponsor:                            |
------------------------------------------+----------------------
 While reading the Hacking doc, I saw the following:

 >  Be aware that this process is not fully future-proof. In particular, if
 Debian has updated their development tool chain since the bundles have
 been built, you may encounter differences between your resulting bundles
 and the original binaries. This should be rare, however, as we use only
 the "Long Term Support" or "Oldstable" of Debian in our build VMs. The
 only reason they should change the tool chain is in the event of serious
 security issues in the development tools themselves.

 It seems like it would be advantageous to include a bunch of (additional)
 information in about:buildconfig to allow fully reproducing (or at least
 comparing) builds, such as git tags/commits and information about
 reproducible build environment, such as the versions of packages.

--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/26813>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online

_______________________________________________
tor-bugs mailing list
tor-bugs@xxxxxxxxxxxxxxxxxxxx
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-bugs